2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-46906 | MEDIUM | 5.4 | 0.3% | Dec 12, 2022 | Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary H... |
| CVE-2022-46905 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary... |
| CVE-2022-46904 | MEDIUM | 5.4 | 0.3% | Dec 12, 2022 | Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary H... |
| CVE-2022-46903 | MEDIUM | 5.4 | 0.3% | Dec 12, 2022 | Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary H... |
| CVE-2022-4312 | MEDIUM | 5.5 | 0.1% | Dec 12, 2022 | A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This could all... |
| CVE-2022-4311 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This coul... |
| CVE-2022-4097 | MEDIUM | 5.3 | 0.6% | Dec 12, 2022 | The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to by... |
| CVE-2022-4016 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.6, B... |
| CVE-2022-4010 | MEDIUM | 4.8 | 0.5% | Dec 12, 2022 | The Image Hover Effects WordPress plugin before 5.5 does not sanitise and escape some of its settings, which could allow... |
| CVE-2022-4005 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | The Donation Button WordPress plugin through 4.0.0 does not sanitize and escapes some parameters, which could allow user... |
| CVE-2022-4004 | MEDIUM | 4.3 | 0.5% | Dec 12, 2022 | The Donation Button WordPress plugin through 4.0.0 does not properly check for privileges and nonce tokens in its "donat... |
| CVE-2022-4000 | MEDIUM | 4.8 | 0.5% | Dec 12, 2022 | The WooCommerce Shipping WordPress plugin through 1.2.11 does not sanitise and escape some of its settings, which could ... |
| CVE-2022-3946 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing an... |
| CVE-2022-3935 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any... |
| CVE-2022-3934 | MEDIUM | 5.4 | 0.9% | Dec 12, 2022 | The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pa... |
| CVE-2022-3933 | MEDIUM | 5.4 | 0.9% | Dec 12, 2022 | The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow... |
| CVE-2022-3930 | MEDIUM | 6.5 | 0.6% | Dec 12, 2022 | The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to chan... |
| CVE-2022-3919 | MEDIUM | 4.8 | 0.5% | Dec 12, 2022 | The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users s... |
| CVE-2022-3908 | MEDIUM | 6.1 | 0.9% | Dec 12, 2022 | The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the p... |
| CVE-2022-3906 | MEDIUM | 4.8 | 0.4% | Dec 12, 2022 | The Easy Form Builder WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow... |
| CVE-2022-3883 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 7.24 does not... |
| CVE-2022-3882 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin WordPress plugin before 2.46 does not ... |
| CVE-2022-3881 | MEDIUM | 5.7 | 0.4% | Dec 12, 2022 | The WP Tools Increase Maximum Limits, Repair, Server PHP Info, Javascript errors, File Permissions, Transients, Error Lo... |
| CVE-2022-3880 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan WordPress plugin before 4... |
| CVE-2022-3879 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authori... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now